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Willett, S., "Metered PCs: Is Your System Watching You?, Wave Systems 
Beta Tests New Technology," May 2, 1994. 
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Cox, B., "Superdistribution," January 1996. 

MSI0 17548 

Hauser, Ralf, C, "Does Licensing Require New Access Control 
Techniques?," August 12, 1993. 

MSI017864 

Purdy, G.B., et al., "A Software Protection Scheme," April 1982. 

MS 101 7899 

Sibert, O., et al., 'The DigiBox: A Self-Protecting Container for 
Information Commerce," July 1995. 

MSI0 18529 

Lampson, B., et al. "Authentication in Distributed Systems in Theory 
and Practice," November 4, 1992. 

MSI018811 

Newman, B.C., "Proxy-Based Authorization and Accounting for 
Distributed Systems," 1993. 

MSI019082 

CUPID, "Protocols and Services (Version 1): An Architectural Overview," 
November 1997. 

MSI020348 

Herzberg, A., et al., "Public Protection of Software," November 1987. 

MSI020373 

Hot Java: "The Security Story," 1996 

MSI020389 

JavaSoft, "Frequently Asked Questions-Applet Security," June 7, 1996. 

MSI021744 

Arneke, D., "AT&T Encryption System Protects Information Services" News 
Release, January 9, 1995. 

MSI022371 

Low, S.H., et al., "Anonymous Credit Cards," November 1994. 

MSI022440 

Kristol, D.M., et al., "Anonymous Internet Mercentile Protocol," March 17, 
1994. 

MSI022766 

The First USENIX Workshop on Electronic Commerce Proceedings, 
July 1995. 

MSI027045 

Denning, Dorothy E., et al., "Data Security," September 1979. 

MSI036052 

Wobber, E., et al. "Authenticating in the Taos Operating System/ 9 
Digital Systems Research Center," December 10, 1993. 

MSI036113 

Olson, M., et al., "Concurrent Access Licensing," 1988. 
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MSI067984 

IVI O IVJVJ 1 C/tJ'T 

Kahn D "The Codebreakers" The Storv of Secret Writina " December 
1996. 

MSIflfiRn?? 

Cohen F B "Protection and Security on the Information 
Superhighway," 1995. 

M9I07QR11 

IVIOIU / 57U 1 1 

Brockschmidt Kraia "Inside OLE 2 " 1994 

MSI079796 

loannidis, J., et al., "The Architecture and Implementation of Network-Layer 
oecuniy unaer unix, uciODer iyyo. 

MSI079844 

Berners-Lee, T.J., et al., "Networked Information Services: The World-Wide 
vveu, iyy^. 

ivioiu/yoou 

Ri\/pct R 1 pt al "A Mpthnri fnr Ohtaininn Dinital Sinn^turp^ and Puhlip- 
rxivCwi, r\.l_., d al., r\ ivicuiuu hji wuidll ill iy L/iyiicu oiyi icuui co ai iu ruuitu 

Key Cryptosystems," 1978. 

MSI079850 

Rivest, R.L., et al., "A Method for Obtaining Digital Signatures and Public- 
Key Cryptosystems," 1978. 

MSI080030 

Ferraiolo, D., et al., "Role-Based Access Control," 1992. 

IVIOlUOULW 1 

knot "D n |o RqgpH Arrpcc Pnntrnl " 1QQ9 

MSI080043 

U.S. Department of Commerce (NIST), "Security Requirements for 
Cryptographic Modules," undated. 

ivioiuouuyo 

KYpi it^pr A W "An fin-l inp Q\/ctpm fr*r f^nntmllinn anH IWIr&nitnrinn 
r\l t>UlZ.C7t , r\.IN., Ml I Wll-Llllc OyolClll IUI wUI HI UIIM iy a I IU IVIUI IHUI II iy 

Software Usage in a Microcomputer Laboratory," August 1988. 

MSI080103 

Millen, J.K., et al., "Security for Object-Oriented Database Systems," 
May 1992. 

MSI080117 

Kim, L, et al., "Novell Cuisine," 1991. 

IVIOIUOU I^U 

KnAnin A "Automatic Software Distribution " June 1984 

MSI080160 

Leiss, E., "On Authorization Systems with Grantor-Controlled 
rropagauon on rnviieyes, 1900. 

MSI080173 

Strack, Hermann, "Extended Access Control in UNIX System V-ACLs 

anH Pnntpvt " AnniiQt 1QQ0 

MSI080194 

Polk, T.W., "Approximating Clark-Wilson "Access Triples" with Basic 
UNIX Controls," October 1993. 

MSI080205 

Kamens, J. I., "Retrofitting Network Security to Third-Party Applications-The 
SecureBase Experience," October 1993. 
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MSI080254 

Gamble, Todd, "Implementing Execution Controls in Unix," 1993. 

MSI080261 

Epstein, J., "A Trusted X Window System Server for Trusted Mach," 
August 30, 1990. 

MSI080290 

Kelter, U., "Discretionary Access Controls in a High-Performance Object 
Management System," 1991. 

MSI080337 

Downs, D.D., et al., "Issues in Discretionary Access Control," April 1985. 

MSI080349 

Solomon, Daniel, J., "Processing Multilevel Secure Objects," April 
1981. 

MSI080356 

Kim, Won, et al., "Object-Oriented Concepts, Databases, and 
Applications," 1989. 

MSI080410 

Maude, T., et al., "Hardware Protection Against Software Piracy," 
September 1984. 

MSI080420 

Lipson, S M "Little Black Box blocks' Illicit Software Copying," September 
14, 1986. 

MSI080441 

Sandhu, Ravi, S., et al., "Implementation Considerations for the Typed 
Access Matrix Model in a Distributed Environment," October 1992. 

MSI080456 

Rescorla, E., et al., The Secure HyperText Transfer Protocol," June 1994. 

MSI080562 

Keefe, T.F., et al., "Prototyping the SODA Security Model," 1990. 

MSI080575 

National Security Agency, "A Guide to Understanding Security 
Modeling in Trusted Systems," October 1992. 

MSI080697 

Sandhu, R.S., "The Typed Access Matrix Model," May 1992. 

MSI080779 

Lunt, Teresa, "Multilevel Security for Object-Oriented Database 
Systems," 1990. 

MSI080875 

Tygar, J.D., et al., "Strongbox: A System for Self-Securing Programs," 
1991. 

MSI080910 

Yee, B., et al., "Secure Coprocessors in Electronic Commerce 
Applications," July 1995. 

MSI080927 

Franklin, M., et al., "An Overview of Secure Distribution Computing," 
March 24, 1992. 

MSI080974 

Anderson, R., "Why Cryptosystems Fail," November 1993. 

MSI081052 

Bishop, M., "Anatomy of a Proactive Password Changer," 1992. 
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MSI081140 

Time-Life Books, "Understanding Computers: Computer Security," 
1986. 

MSI081240 

Wood, P.H., et aI M "UNIX System Security," 1985. 

MSI081464 

Custer, Helen, "Inside Windows NT," 1993. 

MSI081464 

Custer, Helen, "Inside Windows NT," 1993. 

MSI082792 

Symantec Corporation, "THINK Pascal: The Fastest Way to Finished 
Software," 1990. 

MSI082958 

Olivier, M.S., et al., "A Taxonomy for Secure Object-Oriented 
Databases," 1994. 

MSI083003 

McCollum, C. J., et al., "Beyond the Pale of MAC and DAC-Defining 
New Forms of Access Control," 1990. 

MSI083105 

"Mach Books," viewed on February 6, 2002 at 

^KHtv/Aaaaaa/'? r>c rmii orli 1 / afc /pe /rirr\iof*t/m a r*h/ru iHlif*/\AAAAA//HfM"*/hf , »nlf c html ^ 
^fllip J/VVWW^.oo.CrTlU.cUU/alo/Uo/p III Ml.*' 

MCinoonno 

IVIOIwOO IUO 

Denartment of Defense "Trusted Comouter Svstem Evaluation 
Criteria," Dece,ber 1985. 

MSI083356 

LaLonde Wilf, R., et al., "Inside Smalltalk," Volume 1, 1990. 

MSI083356 

LaLonde Wilf, R., et al., "Inside Smalltalk," Volume 1, 1990. 

MSI083400 

Muftic, Sead, "Security Mechanisms for Computer Networks," 1989. 

MSI083410 

Konheim, Alan, G., et al.,"Cryptography: A Primer," 1981. 

MSI083423 

Davies, D.W., et al., "Security for Computer Networks," 1984. 


Davies D W et al "Securitv for Comouter Networks." 1984. 

WQVICv| Willi) d Q V vvUI jr Wlllf/U.wl ivwivwinw, I w V^f. 

MSI083444 

Castano, S., et al., "Database Security," 1995. 

MSI085035 

OOPSLA 1993: Addendum to the Proceedings, "Security for Object- 

wiiciiicu oyoitznio, wc|Jiciimci tu'vuiuuci i, 199^1 

MSI085043 

Thuraisingham, B., et al., "Parallel Processing and Trusted Database 
Management Systems," 1993. 

MSI085049 

Secure Computing, "Constructing a High Assurance Mail Guard," 1994. 

MSI085078 

Sandhu, R.S., et al., "Data and Database Security and Controls," 1993. 
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MSI085115 

Thomas, R.K., et al., "Implementing the Message Filter Object-Oriented 

^pruritv/ MnHpl without Tm^tpH Snhiprte " Aunu^t 1992 

MSI085136 

Sandhu, R., et al., "A Secure Kernelized Architecture for Multilevel Object- 

OriontoH riataHacoc " limp 1QQi 

IVIOIUOO IOC? 

Sibert O et al "The Intel 80x86 Processor Architecture" Pitfalls for 
Secure Systems," May 1995. 


Warp W nhairman RAND Hnrnnratinn "Panel* The InterTrust Commerce 

V V CI 1 w ) V V ■ | Vu/i ICIII 1 1 ICII 1 1 V/\l >l l_/ V>UI Uwl CI 11 v/l 1 I Gil 1^1 • 1 1 Iw III 1^1 1 1 Uwl VV/I 1 II 1 1^1 

Architecture," 1997. 

MSI085217 

Fine, T.,et al, "Assuring Distributed Trusted Mach," 1993. 

IVIOlUOOZOU 

M in par ^ F "Prnv/idinn Pnlirv Cnntrnl Ox/pr Ohipct Onpration^ in a Manh 

Based System," April 28, 1995. 

MSI085245 

Harris, J., et al., "Bento Specification," July 15, 1993. 

MSI085479 

Young, W.D., "Verifiable Computer Security and Hardware: Issues," 
September 1991. 

MSI085551 

Denning, A., "OLE Controls Inside Out," 1995. 

MSI085569 

Denning, D., "Crytography and Data Security," 1982. 

MSI085569 

Denning, D., "Crytography and Data Security," 1982. 

IVIOIU00390 

^rhnpipr Rrnro "AnnlipH nrvntofiranhv" Protocols Alaorithms and 

Source Code in C," 1994. 

IVI9IU09094 

ftarfinlcpl ^imQnn p* al "Prartiral UNIX Securitv " 1991 

MSI085704 

Dougherty, D., et al., "The Mosaic Handbook for the X Window 
oysiem, nyy**. 

MSI085756 

Curry, D.A., "UNIX System Security: A Guide for Users and System 
AurninisiraiorSy i^sjz. 

MSI085831 

International Infrastructure Standards Panel, "IISP Need #31 -Containers or 

^prurp Parkaninn " Spntpmhpr 1ft 1QQ*S 

MSI085834 

International Infrastructure Standards Panel, "IISP Need #32- 
Authentication of Content," September 18, 1995. 

MSI085837 

International Infrastructure Standards Panel, "IISP Need #33-Control 
Enforcement," September 18, 1995. 
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MSI085840 

International Infrastructure Standards Panel, "I ISP Need #34-Billing and 
Payment," September 18, 1995 

MSI085843 

International Infrastructure Standards Panel, "MSP Need #35-Reporting," 
September 18, 1995. 

MSI086146 

Kaplan, M., "IBM Cryptolopes, Super Distribution and Digital Rights 
Management," December 30, 1996. 

MSI086641 

Sebes, E.J., et al., "The Triad System: The Design of a Distributed, Real- 
Time, Trusted System," January 22, 1998. 

MSI086653 

Sebes, E.J., et al., "The Architecture of Triad: A Distributed, Real-Time, 
Trusted System," (undated). 

MSI086675 

Sebes, E.J., "Overview of the Architecture of Distributed Trusted Mach," 
undated. 

MSI086687 

Vickers Benzel, T.C., et al., "Identification of Subjects and Objects in a 
Trusted Extensible Client Server Architecture," undated. 

MSI086704 

Borenstein, N., "MIME Extensions for Mail-Enabled Applications: 
Application/Safe-Tel and Multipart/Enabled-Mail," November 1993. 

MSI086845 

Bellare, M., "iKP-A Family of Secure Electronic Payment Protocols," April 
16, 1995. 

MSI086864 

Harn, Lein, et al., "A Software Authentication System for the 
Prevention of Computer Viruses," 1992. 

MSI086893 

Deutsch, P., "GZIP.File Format Specification Version 4.3," May 1996. 

MSI086905 

Gong, Li, "A Secure Identity-Based Capability System," January 1989. 

MSI086923 

Merkle, R.C., "Secure Communications Over Insecure Channels," April 
1978. 

MSI086926 

Denning, D.E., "Secure Personal Computing in an Insecure Network," 
August 1979. 

MSI086946 

Medvinsky, G., et al., "NetCash: A Design for Practical Electronic 
Currency on the Internet," 1993. 

MSI086951 

Franz, M M "Technological Steps Toward a Software Component Industry," 
undated. 

MSI086985 

Kent, S. f et al., "Privacy Enhancement for Internet Electronic Mail: Part II-- 
Certificate-Based Key Management," August 1989. 
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MSI087007 

Linn, J., "Privacy Enhancement for Internet Electronic Mail: Part I— 
Message Encipherment and Authentication Procedures," August 1989. 

MSI087007 

Linn, J., "Privacy Enhancement for Internet Electronic Mail: Part I-- 
Message Encipherment and Authentication Procedures," August 1989. 

MSI087037 

Chaum, D., "Achieving Electronic Privacy," August 1992. 

MSI087044 

Microsoft Press, OLE 2 Programmer's Reference; Volume 1 , "Working with 

\A/inHn\A/Q Ohiprtc " 1QQ4 

MSI087047 

Brockschmidt, K. t "A Primer on Designing Custom Controls," 

Marrh/Anril 1QQ9 
iVIdl wl l/npi II I *7«7^. 

MSI087061 

Klemond, P., Taking the Bull by the Horns: Investigating Object Linking 

pnrl FmhpHHinn Part 1 " Marrh/Anril 
dl IU t— 1 1 IUCUUII ly , rail 1, IVIal Ul \lr\\j\ II 


Klemond P "Investiaatina Ohiect Linkina and Embeddina Part II* Addina 
Server Support," May/June 1992. 

MSI087089 

DiLascia, Paul, "OLE Made Almost Easy: Creating Containers and 
Servers Using MFC 2.5," April 1994. 

MSI087107 

Coad, Peter, "Object-Oriented Patterns," September 1992. 

iVIulUOr 1 

Zelnick Nate "Keenina Business Safe on the Internet " Aoril 25 1995 

MSI087160 

Lucent Technologies, "AT&T Encryption System Protects Information 

Ocl Vllruo, UdllUaiy «7, \%JW. 

MSI087341 

Birrell, Andrew, D., et al., "A Global Authentication Service Without 

ftlnhal Truct " Anril IQfifi 

VJHUUdl 1 lUOl, MjJlll I90U. 

MSI087352 

Gasser, M., et al., The Digital Distributed System Security Architecture," 

MSI087365 

Abadi, M., et al., "Authentication and Delegation with Smart-Cards," 

1QQ0 

MSI087392 

Zeleznick, MP., "Security Design in Distributed Computing Applications," 
December 1993. 

MSI087408 

Moffett, Jonathan, D., et al., "An Introduction to Security Distributed 
Systems," August 1993. 

MSI087422 

Netscape, "SSL 2.0 Protocol Specification," February 9, 1995. 
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MSI087444 

Davis, D., et al., "Network Security via Private-Key Certificates," October 
1990. 

MSI087448 

Gruber, R., et al., "Disconnected Operation in the Thor Object-Oriented 
Database System," December 1994. . 

MSI087454 

Ting, T.C., et al., "Requirements, Capabilities and Functionalities of 
User Role Based Security for an Object-Oriented Design Model," 

1QQ9 

MSI087519 

Gifford, David, K., "Crytographic Sealing for Information Secrecy and 
Authentication," 1982. 

MSI087532 
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